$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ff057901-a1e0-3a2f-8d39-d1094e74ff6d.roa File: ff057901-a1e0-3a2f-8d39-d1094e74ff6d.roa (raw, json) Hash identifier: q38cVP21W+obGfSb8mo79yR6MsJks//zvcI6EyMIZ0Y= Subject key identifier: B8:42:03:E9:22:07:E7:71:89:AB:BD:8D:B0:9E:C0:FA:7C:4E:53:4D Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EB9B7964CBB1525150D400F40 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ff057901-a1e0-3a2f-8d39-d1094e74ff6d.roa Signing time: Tue 04 Aug 2026 13:22:58 +0000 ROA not before: Tue 04 Aug 2026 13:22:58 +0000 ROA not after: Mon 02 Nov 2026 14:22:58 +0000 asID: 7203 IP address blocks: 172.255.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:b7:96:4c:bb:15:25:15:0d:40:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 4 13:22:58 2026 GMT Not After : Nov 2 14:22:58 2026 GMT Subject: CN=b86240d5-cacb-4eb2-a53b-35a41c89d89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:75:f9:ee:86:ac:6d:4a:70:fb:9c:9b:e2: 4f:9c:9b:76:67:11:2c:41:04:ea:2f:73:c3:40:8c: ba:03:99:0a:a7:28:1b:54:11:ea:dd:94:2d:29:22: 00:a6:2a:19:21:9f:8a:72:fe:66:9c:c1:90:7e:c9: f2:69:f4:a1:4e:be:47:bb:aa:d0:a2:53:84:8c:6f: 97:66:56:bb:75:1c:bc:82:c8:c2:5e:f3:52:be:1b: ce:9b:c8:93:72:b8:a8:52:05:18:4a:f0:de:f3:45: 6a:b9:c7:a8:43:b1:59:da:4d:16:2b:2e:01:0e:08: c8:26:d1:3d:48:91:37:9e:d0:41:f9:8e:83:55:c5: bb:79:d8:1f:61:c4:41:a0:fb:d7:f0:89:06:2b:e1: cb:ff:44:94:f4:c2:ce:95:37:10:7d:71:12:72:c4: df:00:d1:d2:25:0e:93:39:d7:65:21:96:37:26:c2: 17:52:70:d9:a8:07:01:1b:b2:3e:ce:e5:68:f5:f9: 80:16:1f:07:09:90:f4:6c:0e:5b:7a:cc:78:b3:96: ba:ff:a3:7a:6e:0a:2f:c2:4d:ad:6d:6c:cd:43:e4: 98:e9:46:44:ca:00:dd:be:9f:07:cd:e4:8b:dc:70: 2a:59:9c:63:af:05:e3:47:99:e8:09:20:f1:96:cd: f0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:42:03:E9:22:07:E7:71:89:AB:BD:8D:B0:9E:C0:FA:7C:4E:53:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ff057901-a1e0-3a2f-8d39-d1094e74ff6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 172.255.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:22:2e:c8:23:09:65:6e:e8:8a:0f:b2:72:fc:d8:f2:0d:74: 85:cd:59:32:43:f0:d6:be:78:65:5d:bc:55:33:8e:b5:fb:01: 7b:37:9b:fc:2c:fc:4d:73:04:c3:d1:26:c9:f2:6f:11:e7:0f: 08:7c:8a:8c:76:45:8a:13:5c:0f:bf:af:9d:c2:2b:0f:da:29: 24:09:e6:fa:64:f8:50:d7:e6:6f:1d:80:31:b2:e6:c9:6d:a7: 17:0a:c6:13:31:e0:8d:4d:a9:88:c8:3b:1c:74:bd:5e:0b:4f: 65:32:d3:a4:d6:7e:0c:17:a8:9e:4b:76:4e:04:b5:80:bd:be: 1d:06:4a:ba:3a:0c:e4:43:3f:ce:1a:5b:fc:b6:c3:33:26:90: 30:1b:5e:95:6d:ac:14:10:a1:fc:2c:a9:f0:50:91:6f:1f:4e: 36:6b:8a:1c:51:a9:e7:e4:f4:64:55:2e:6a:8c:8b:7b:5c:7a: f1:6d:a0:46:2a:1b:ba:c8:e9:77:69:4e:f3:da:0e:5f:7d:e9: d7:8f:0c:5e:e6:5a:d8:42:d7:53:28:db:86:62:e6:dc:23:a8: 75:40:a6:9c:8c:14:74:0c:76:64:10:05:dd:94:66:78:a2:ca: 4a:78:1c:44:07:0b:13:f9:2f:c1:ce:54:fa:93:51:4f:3d:77: 06:54:c5:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65t5ZMuxUlFQ1AD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNDEzMjI1OFoXDTI2MTEwMjE0MjI1OFowLzEtMCsGA1UEAxMk Yjg2MjQwZDUtY2FjYi00ZWIyLWE1M2ItMzVhNDFjODlkODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJN1+e6GrG1KcPucm+JPnJt2ZxEsQQTqL3PD QIy6A5kKpygbVBHq3ZQtKSIApioZIZ+Kcv5mnMGQfsnyafShTr5Hu6rQolOEjG+X Zla7dRy8gsjCXvNSvhvOm8iTcrioUgUYSvDe80VquceoQ7FZ2k0WKy4BDgjIJtE9 SJE3ntBB+Y6DVcW7edgfYcRBoPvX8IkGK+HL/0SU9MLOlTcQfXEScsTfANHSJQ6T OddlIZY3JsIXUnDZqAcBG7I+zuVo9fmAFh8HCZD0bA5besx4s5a6/6N6bgovwk2t bWzNQ+SY6UZEygDdvp8HzeSL3HAqWZxjrwXjR5noCSDxls3wTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhCA+kiB+dxiau9jbCewPp8TlNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZmYwNTc5MDEtYTFlMC0z YTJmLThkMzktZDEwOTRlNzRmZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrP8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIiLsgjCWVu6IoPsnL82PINdIXNWTJD8Na+eGVdvFUzjrX7AXs3m/ws /E1zBMPRJsnybxHnDwh8iox2RYoTXA+/r53CKw/aKSQJ5vpk+FDX5m8dgDGy5slt pxcKxhMx4I1NqYjIOxx0vV4LT2Uy06TWfgwXqJ5Ldk4EtYC9vh0GSro6DORDP84a W/y2wzMmkDAbXpVtrBQQofwsqfBQkW8fTjZrihxRqefk9GRVLmqMi3tcevFtoEYq G7rI6XdpTvPaDl996dePDF7mWthC11Mo24Zi5twjqHVAppyMFHQMdmQQBd2UZnii ykp4HEQHCxP5L8HOVPqTUU89dwZUxWw= -----END CERTIFICATE-----Generated at Thu Aug 27 17:38:00 2026 by rpki-client